Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/340561a8-3b7d-3e24-a7e1-54cbdebea2c8.roa
File: 340561a8-3b7d-3e24-a7e1-54cbdebea2c8.roa (raw, json)
Hash identifier: xfq0qCJ1WmC3TapASw59sVfFv/wmPnLdPrOK6McNO0o=
Subject key identifier: 1B:5D:3E:E3:6C:73:63:E6:C5:9A:08:83:20:B3:F8:02:AD:07:48:36
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB3C54520236FD2D82D169200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/340561a8-3b7d-3e24-a7e1-54cbdebea2c8.roa
Signing time: Tue 26 Jul 2022 12:00:00 +0000
ROA not before: Tue 26 Jul 2022 12:00:00 +0000
ROA not after: Wed 31 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.244.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b3:c5:45:20:23:6f:d2:d8:2d:16:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 26 12:00:00 2022 GMT
Not After : Aug 31 04:00:00 2022 GMT
Subject: CN=e19500d6-7223-4c10-a0c8-4afef6c6ddd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:ea:ad:c5:b0:7d:45:87:3a:9f:92:c1:6d:
13:32:5d:e0:cd:12:03:ff:b4:fe:12:2a:81:3a:e0:
39:6e:84:fe:e9:cb:c9:6f:5f:d3:6d:c6:29:84:5f:
ec:12:ac:88:02:39:51:82:99:d5:fd:40:72:b7:f4:
bb:b2:3f:36:5f:3b:39:76:f2:ca:f6:61:85:ef:8c:
66:f6:34:37:67:4d:ff:28:96:57:b2:f4:75:45:b7:
17:69:cf:10:c1:6d:e9:22:14:4f:4b:8f:b8:f2:b3:
05:15:38:20:45:82:f7:5c:14:79:fa:8b:40:f9:6a:
78:64:b1:85:19:4a:3d:33:93:c9:2c:62:15:21:3a:
25:ae:5f:2c:1b:96:bb:2c:c2:32:e4:ec:49:d6:c0:
62:61:7a:39:6d:75:83:12:14:af:aa:97:2e:eb:50:
6f:a6:77:1f:ad:04:1c:cb:3d:fe:d2:30:dc:36:98:
d2:f2:64:b7:89:70:6e:1d:1c:3c:fd:cc:ef:45:0a:
b6:24:95:42:3d:7b:f6:e4:8d:fe:31:f0:80:ae:de:
46:02:3c:c2:a6:33:c3:97:76:e0:b2:b3:66:d5:74:
7e:98:94:b3:60:5b:3b:ea:00:b8:50:76:ba:93:52:
8d:9c:62:8e:74:69:47:ac:bb:ec:8a:01:76:d9:13:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:3E:E3:6C:73:63:E6:C5:9A:08:83:20:B3:F8:02:AD:07:48:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/340561a8-3b7d-3e24-a7e1-54cbdebea2c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.244.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:c4:83:67:66:76:80:06:fe:fb:bb:7b:03:59:0c:5e:b6:07:
b8:8d:61:a3:c6:ec:27:7d:c1:74:de:eb:f9:e7:ed:13:15:1c:
66:c5:c7:fe:d7:c0:c4:d1:75:aa:c0:a4:6e:57:20:39:05:6f:
16:00:f2:a3:18:2f:2e:7b:90:f1:df:f8:43:ac:4e:30:98:a6:
07:1e:7f:50:98:2b:e2:19:6a:98:32:eb:e6:f0:70:fe:91:6c:
73:7f:08:f1:d3:06:91:de:54:25:97:ef:59:3f:2b:b9:54:9a:
89:cf:e4:cd:a7:9b:5f:bd:19:27:c6:5d:61:a2:dd:3b:d0:2a:
9d:a8:26:28:95:05:a8:ac:74:24:2a:24:2b:36:b1:1d:1d:5a:
92:6c:c0:cf:13:8c:f5:35:ad:1b:dd:12:25:af:16:ae:ad:81:
e6:fc:d4:c9:fb:fa:8b:41:d4:f4:e5:74:62:20:2b:69:51:12:
11:a0:07:5e:db:bb:bb:9b:ed:e8:c0:cc:0a:a9:5a:09:c3:89:
b5:14:fb:7c:ab:a5:11:e6:29:a0:ad:31:5c:cf:42:cf:0f:39:
87:d6:ef:63:b9:b5:06:77:42:a4:59:fd:0a:ed:65:2e:c4:9f:
fa:5f:d8:c8:12:9f:f7:46:f3:d0:49:fb:9c:1c:9d:5e:5a:2f:
7c:a1:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:05:32 2025 by rpki-client